Information Systems Security Manager

About this role

<p>CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats. </p> <p>CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, Seattle, and London. For more information, please visit <a href="https://www.chaosinc.com">www.chaosinc.com</a>.</p> <p><strong><span data-contrast="auto">Role Overview:</span></strong></p> <p><span data-contrast="auto"><span class="TextRun SCXW85821554 BCX0" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW85821554 BCX0">CHAOS Industries <span class="NormalTextRun SCXW262922489 BCX0">seeks an experienced Information Systems Security Manager (ISSM) to serve as the primary security authority for classified information systems across one or more Program Security Authorization Boundaries (PSABs). The ISSM will be responsible for the end-to-end security posture of program systems, driving risk management decisions, and ensuring compliance with applicable government regulations and contractual requirements. This role interfaces directly with government Authorizing Officials (</span><span class="NormalTextRun SCXW262922489 BCX0">AOs), Program Managers, and cross-functional engineering teams to sustain Authorization to Operate (ATO) for complex, multi-domain environments.</span></span></span></span></p> <p><strong><span data-contrast="auto">Responsibilities: </span></strong><span data-ccp-props="{"201341983":0,"335559685":360,"335559739":0,"335559740":240}"> </span></p> <ul> <li><strong><span data-contrast="none">Authorization & Compliance</span></strong><span data-ccp-props="{"335559738":240,"335559739":80}"> </span> <ul> <li><span data-contrast="none">Develop, maintain, and submit system Security Authorization Packages in accordance with NIST SP 800-37 RMF, ICD 503, JSIG, and DAAPM frameworks.</span><span data-ccp-props="{"335559738":40,"335559739":40}"> </span></li> <li><span data-contrast="none">Manage the full lifecycle of ATOs including continuous monitoring, annual reviews, and Plan of Action & Milestones (POA&Ms).</span><span data-ccp-props="{"335559738":40,"335559739":40}"> </span></li> <li><span data-contrast="none">Serve as the primary liaison to government AO/ISSM/ISSO community for all classified system authorization activities.</span><span data-ccp-props="{"335559738":40,"335559739":40}"> </span></li> <li><span data-contrast="none">Ensure compliance with DCSA, DSS, and applicable IC community security policies across all assigned programs.</span><span data-ccp-props="{"335559738":40,"335559739":40}"> </span></li> </ul> </li> <li><strong><span data-contrast="none">System Security Engineering & Risk Management</span></strong><span data-ccp-props="{"335559738":240,"335559739":80}"> </span> <ul> <li><span data-contrast="none">Conduct and review security assessments, risk analyses, and vulnerability scans (Nessus, ACAS, SCAP) to identify and remediate risks.</span><span data-ccp-props="{"335559738":40,"335559739":40}"> </span></li> <li><span data-contrast="none">Develop and maintain System Security Plans (SSPs), Security Concept of Operations (CONOPS), hardware/software baseline documentation, and interconnection agreements.</span><span data-ccp-props="{"335559738":40,"335559739":40}"> </span></li> <li><span data-contrast="none">Evaluate proposed changes to hardware, software, and firmware for security impact; approve or reject changes in accordance with the Configuration Management (CM) process.</span><span data-ccp-props="{"335559738":40,"335559739":40}"> </span></li> <li><span data-contrast="none">Oversee implementation and validation of STIG/SRG hardening requirements across Windows, Linux, and network infrastructure.</span><span data-ccp-props="{"335559738":40,"335559739":40}"> </span></li> </ul> </li> <li><strong><span data-contrast="none">Personnel & Program Support</span></strong><span data-ccp-props="{"335559738":240,"335559739":80}"> </span> <ul> <li><span…